DOCKET NO.: MSFT-0107/127334.7 
Application No.: 09/482,928 
Office Action Dated: April 26, 2004 



PATENT 



This listing of claims will replace all prior versions, and listings, of claims in the application. 
Listing of Claims: 

1-129 (Canceled) 



130. (Previously Presented) A method for a device to interdependently 
validate a piece of digital content and a corresponding digital license for rendering the digital 
content, the digital content being encrypted, the encrypted digital content being decryptable 
according to a decryption key (KD) and being packaged in a digital content package, the 
digital content package being provided by a content provider having a public key (PU-C) and 
a private key (PR-C), the digital license being provided by a license provider having a public 
key (PU-L) and a private key (PR-L), the device having a public key (PU-D) and a private 
key (PR-D), the digital content package comprising: 

the encrypted digital content; and 

the content provider public key (PU-C) encrypted with the decryption key 
(KD) and signed by the content provider private key (PR-C) (i.e., (KD (PU-C) S (PR-C))); 
the digital license comprising: 

the decryption key (KD) encrypted with the device public key (PU-D) 
(i.e.,(PU-D (KD))); 

a digital signature from the license provider (without any attached certificate) 
based on (KD (DRL)) and (PU-D (KD)) and encrypted with the license provider private key 
(i.e., (S (PR-L))); and 

a certificate containing the license provider public key (PU-L) and signed by 
the content provider private key (PR-C) (i.e., (CERT (PU-L) S (PR-C))); 
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the method comprising: 

obtaining (PU-D (KD)) from the license; 

applying (PR-D) to (PU-D (KD)) to produce (KD); 

obtaining (KD (PU-C) S (PR-C)) from the digital content package; 

applying (KD) to (KD (PU-C) S (PR-C)) to produce (PU-C); 

applying (PU-C) to (S (PR-C)) to validate (KD (PU-C) S (PR-C)), thereby 
validating the digital content package; 

obtaining (CERT (PU-L) S (PR-C)) from the license; 

applying (PU-C) to (CERT (PU-L) S (PR-C)) to validate (CERT (PU-L) S 
(PR-C)), thereby validating the content provider, and also to obtain (PU-L); 

obtaining (S (PR-L)) from the license; and 

applying (PU-L) to (S (PR-L)), thereby validating the license. 

131. (Previously Presented) The method of claim 130 wherein the digital 
content package further comprises a content / package ED identifying one of the digital 
content and the digital content package, and wherein the license further comprises the content 
/ package ID of the corresponding digital content / digital content package, the method 
further comprising ensuring that the content / package ID of the license in fact corresponds to 
the content / package ID of the digital content / digital content package. 

132. (Previously Presented) The method of claim 130 wherein the license 
further comprises a license rights description (DRL) specifying terms and conditions that 
must be satisfied before the digital content may be rendered, the method further comprising; 
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evaluating the license terms and conditions to determine whether the digital 
content is permitted to be rendered in the manner sought; 

if so, applying (KD) to the encrypted digital content to decrypt such encrypted 
digital content; and 

rendering the decrypted digital content. 

133. (Previously Presented) The method of claim 132 wherein the license 
rights description is encrypted with the decryption key (KD) (i.e., (KD (DRL))), the method 
further comprising applying (KD) to (KD (DRL)) to obtain the license terms and conditions. 

134-157 (Canceled) 
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